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Top Stories 

• Petro-Hunt LLC reported January 2 that over 25,000 gallons of crude oil was released 
following an oil well blowout at its site in McKenzie County, North Dakota. - Forum of 
Fargo-Moorhead (See item 2) 

• A semi-truck carrying propane and a car collided January 2 prompting the closure of both 
directions of Interstate 20 in Arlington, Texas, for more than 24 hours before all lanes 
reopened January 3 after propane began burning when the semi-truck rolled onto its side 
and leaked. - KXAS 5 Fort Worth (See item 9) 

• At least 35 vehicles were involved in 2 separate pileups on Interstate 93 in Ashland, New 
Hampshire, January 2 prompting a number of injuries due to whiteout road conditions. - 
Associated Press (See item IT) 

• One security guard was killed and 2 individuals were injured January 1 when a gunman 
opened fire at the Cal Skate roller rink in Grand Terrace, California, during an all-night 
New Year's Eve event. - Associated Press (See item 32) 
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Energy Sector 



1. January 4, Lower Hudson Valley Journal News - (New York) Con Ed substation fire 
extinguished; Hawthorne station shut. Authorities are investigating the cause of a 
fire that erupted at a Con Edison substation in Thornwood January 4 which prompted 
the closure of the Hawthorne Metro-North train station and a portion of the Harlem 
Line while crews responded and contained the fire. 

Source: http://www.lohud.com/story/news/local/westchester/2015/01/04/con-edison- 
substation-fire-hawthorne/2 1 256245/ 

2. January 3, Forum of Fargo-Moorhead - (North Dakota) Blowout releases 600 barrels 
of oil in McKenzie County. Petro-Hunt LLC reported January 2 that over 25,000 
gallons of crude oil was released following an oil well blowout at its site in McKenzie 
County, North Dakota. Crews worked to control and clean up the spill while authorities 
continued to investigate whether any oil reached a tributary of the Missouri River. 
Source: http://www.iamestownsun.com/news/state/3647122-blowout-releases-600- 
barrels-oil-mckenzie-county 

T Return to top i 

Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

3. January 3, Detroit Free Press - (Michigan) Nuke plant reports 2-month oil leak into 
Lake Michigan. Officials are investigating after an estimated 2,000 gallons of oil 
leaked from an oil cooling system on the Unit 2 main turbine at the Donald C. Cook 
Nuclear Plant near Bridgman into Lake Michigan beginning around October 25 until 
December 20 when it was reported. 

Source: http://www.freep.com/storv/news/local/michigan/2015/01/03/nuclear-power- 
oil-spill-lake-michigan/2 1 2 15045/ 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

4. January 5, USA Today - (National) Morgan Stanley fires employee, cites data theft. 
Morgan Stanley officials reported January 5 that the investment banking firm began 
notifying about 900 clients of its wealth management division that a former employee 
stole partial account information of up to 10 percent of the division’s client portfolio 
and briefly posted the information on the Internet. The information was promptly 
removed and the firm instituted enhanced security procedures on the affected accounts 
as a precaution. 

Source: http://www.usatodav.com/storv/monev/personalfinance/2015/01/05/morgan- 
stanley-employee-fired-data/2 1283617/ 

5. January 4, Associated Press - (Missouri) Columbia man admits to string of bank 
robberies. Police arrested a man for allegedly robbing at least of six banks in 
Columbia, Missouri, since November including the latest robbery at a Boone County 
National Bank branch January 3. 

Source: http://fox2now.corn/2015/01/04/columbia-man-admits-to-string-of-bank- 
robberies/ 

[ Return to top ] 

Transportation Systems Sector 

6. January 5, WKMG 6 Orlando - (Florida) 3 sisters killed in 1-95 crash in Brevard; 6 
others injured. Three individuals were killed and 6 others were injured in a 4- vehicle 
crash on Interstate 95 in Rockledge January 4 after a car struck a guardrail in the 
median before striking another vehicle, causing a third car to collide with the second. A 
fourth vehicle struck debris from the accident while northbound lanes of the highway 
were closed for more than 5 hours as authorities investigated. 

Source: http://www.clickorlando.com/news/3-killed-in-i95-multivehicle-crash-in- 
brevard-county/30523046 

7. January 4, WPSD 6 Paducah - (Kentucky) Crashed plane found in Lyon County. 
Four people were killed in a plane crash in Lyon County after a passenger reported the 
accident and was transported to an area hospital with injuries. The aircraft was found in 
a wooded area south of the Suwanee community and authorities are investigating the 
incident. 

Source: http://www.wpsdlocal6.com/storv/27750891/possible-plane-crash-in-lyon- 
county 

8. January 3, KPIX 5 San Francisco - (International) Angry, hungry SFO-bound 
passengers left inside plane stuck on tarmac for 12+ hours, in Abu Dhabi. 

Passengers on an Etihad Airways flight were stuck on the tarmac in Abu Dhabi for 
more than 12 hours January 3 after fog forced a temporary closure of Abu Dhabi 
Airport. Passengers landed safely at San Francisco International Airport following the 
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16 hour flight once the airport reopened. 

Source: http://sanfrancisco.cbslocal.com/2015/01/03/angrv-hungrv-sfo-bound- 
passengers-left-inside-plane-stuck-on-tarmac-for-12-hours-in-abu-dhabi/ 

9. January 3, KXAS 5 Fort Worth - (Texas) Propane tank truck fire shuts down 
Interstate 20 in Arlington. A semi-truck carrying propane and a car collided January 2 
prompting the closure of both directions of Interstate 20 in Arlington, Texas, for more 
than 24 hours before all lanes reopened January 3 after propane began burning when 
the semi-truck rolled onto its side and leaked. A third car hit the two vehicles during the 
incident and no injuries were reported. 

Source: http://www.nbcdfw.com/news/local/18-Wheeler-Fire-Shuts-Down-Interstate- 
20-in-Arlington-287324761.html 

10. January 2, KOMO 4 Seattle - (Washington) Thieves hit Gold Bar post office, steal 
mail from locked boxes. Authorities are investigating after thieves broke into an 
unknown number of locked mailboxes at the Gold Bar post office in Snohomish 
County January 2. 

Source: http://www.komonews.com/news/local/Thieves-hit-Gold-Bar-post-office-steal- 
mail-from-locked-boxes-287385631.html 



11. January 2, Associated Press - (New Hampshire) Dozens of vehicles crash in two 
pileups on New Hampshire Highway. At least 35 vehicles were involved in 2 
separate pileups on Interstate 93 in Ashland, New Hampshire, January 2 prompting a 
number of injuries due to whiteout road conditions. 

Source: http://www.nvtimes.com/2015/01/03/us/new-hampshire-interstate-93-pileup- 
crash.html 



For another story, see item 1 
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Food and Agriculture Sector 

12. January 5, U.S. Department of Agriculture - (International) Texas firm recalls lamb 
products imported without benefit of inspection. AMD Imports Inc., a distributor in 
Houston, Texas, issued a recall January 2 for about 35,275 pounds lamb products 
imported from Australia because they were not presented at the U.S. point of entry for 
inspection by the Food Safety and Inspection Service, posing possible health risks. 
Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archi ve/20 1 5/recall-00 1-20 1 5-release 

13. January 2, New Bedford Standard-Times - (Massachusetts) Salmonella closes New 
Bedford restaurant. Health officials ordered Churrascaria Aveirense in New Bedford 
closed January 2 until further notice after several patrons who dined at the restaurant 
between December 31 and January 1 tested positive for Salmonella. The restaurant can 
reopen when all employees test negative for the bacteria and the business meets all 
food safety requirements. 
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Source: http://www.southcoasttoday.com/article/20150102/NEWS/150109750 



14. January 2, U.S. Food and Drug Administration - (Oregon; Washington) Full Tilt Ice 
Cream recalls all dairy based ice cream products except non-dairy frozen desserts 
because of possible health risk. The U.S. Food and Drug Administration reported 
January 2 that Seattle-based Full Tilt Ice Cream issued a recall for all dairy based ice 
cream flavors produced January 1, 2014 - December 19, 2014 due to possible Fisteria 
monocytogenes contamination found at the company’s supplier, Snoqualimie Gourmet 
Ice Cream. The affected products were packaged in 16-ounce, 1 1/2-gallon, and 3- 
gallon containers and distributed to grocery stores and retail scoop shops in Oregon and 
Washington. 

Source: http://www.fda.gov/Safety/Recalls/ucm428769.htm 

15. January 2, U.S. Food and Drug Administration - (National) Zilks Foods issues allergy 
alert on undeclared peanuts in hummus products. The U.S. Food and Drug 
Administration reported January 2 that Zilks Foods, FFC recalled all of its hummus 
products sold in 8-ounce containers after the company learned that a spice ingredient 
from a single supplier used in the affected products was contaminated with peanut 
allergens. The recalled products were distributed to retailers nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm428760.htm 
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Water and Wastewater Systems Sector 

16. January 3, San Antonio Express-News - (Texas) SAWS reports 100,000 gallon of 
sewage leak on Northwest Side. The San Antonio Water System reported January 2 
that an estimated 100,000 gallons of sewer water spilled when a section of a 24-inch 
sewer main collapsed during construction work on the Northwest Side behind Ingram 
Park Mall in Texas. No adverse impacts were reported from the spill and crews cleaned 
up the site. 

Source: http://www.mvsanantonio.corn/news/local/article/SAWS-reports-100-000- 
gallon-sewage-leak-on-5 992477 .php 

17. January 3, Honolulu Star-Advertiser - (Hawaii) Brown water advisory issued for 
West Maui waters. The public was advised to stay out of flood waters and storm 
runoff due to possible overflow of contaminated water in West Maui from Honolua 
Bay to Hanakao’o Beach Park after a brown water advisory was issued by health 
officials January 3 following heavy rainfall January 2. 

Source: 

http://www.staradvertiser.com/news/breaking/20150103 Brown water advisory issue 
d for West Maui waters.html 

18. January 2, Orange County Register - (California) Sewage spill closes portion of 
Newport Bay. The Orange County Health Care Agency closed a section of Newport 
Bay to swimmers and divers January 2 until further notice following a sewage spill. 
Source: http://www.ocregister.com/articles/newport-646902-portion-section.html 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 

19. January 5, WTAM 1100 AM Cleveland - (Ohio) School closed by gas leak reopening. 
Admiral King Elementary School in Lorain reopened January 5 after closing for 3 
months due to a gas leak caused by a leak in the gas well under the school requiring 
extensive repairs. 

Source: http://www.wtam.com/articles/wtam-local-news-122520/school-closed-by-gas- 
leak-reopening-131 15615 

20. January 5, WUSA 9 Washington, D.C. - (Maryland) School bus involved in 4-vehicle 
crash in Charles County. Sixteen students and 2 others were transported to an area 
hospital as a precaution after a school bus and 3 other vehicles were involved in an 
accident in Charles County, Maryland, January 5. 

Source: http://www.wusa9.com/storv/news/2015/01/05/charles-countv-md-school- 
bus/2 1278031/ 

21. January 5, Charlotte Observer - (North Carolina) 24 hurt in Union school bus 
accident; 1 driver has serious injuries. Twenty-one students and 3 others were 
injured following an accident involving a Union County school bus that overturned 
after it drove onto a shoulder lane and over-corrected, hitting another vehicle on 
Unionville Indian Trail Road January 5. 

Source: http://www.charlotteobserver.com/2015/01/05/5426365/union-co-school-bus- 
in-roll-over.html 

22. January 4, Associated Press - (New Mexico) Carlsbad Caverns National Park 
reopens a day after closing because of icy roads. The Carlsbad Caverns National 
Park in New Mexico reopened January 4 with limited facilities after the park was 
closed January 3 due to icy roads and the shutdown of Highway 62-180 south of 
Carlsbad. The freezing temperatures damaged 1,000 feet of pipe. 

Source: 

http://www.therepublic.com/view/story/0ale312589dc4f8ca82592249c0da247/NM— 

Carlsbad-Cavems-Park-Closed 

[ Return to top ] 
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Emergency Services Sector 



23. January 4, KXTV 10 Sacramento - (California) Accused jail escapee robs bank, 
bitten by police dog. Authorities discovered that a man who was arrested January 3 for 
robbing a bank in Stockton was an escapee from the San Joaquin County Jail in 
California after police apprehended the man and took him into custody. 

Source: http://www.newsl0.net/story/news/local/stockton/2015/01/04/accused-iail- 
escapee-robs-bank-bitten-by-police-dog/21 255765/ 

24. January 2, KFSN 30 Fresno - (California) Broken water main cuts water to jail 
inmates and Fresno County workers. Water service at the Fresno County Sheriffs 
Office in California was cut off for several hours January 1 due to a water main leak. 
Bottled water was provided to nearly 400 inmates and guards escorted the inmates to 
use the restroom while repairs were made to the water main. 

Source: http://abc30.com/news/broken-water-main-cuts-water-to-iail-inmates-and- 
fresno-county-workers/460167/ 
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Information Technology Sector 

25. January 5, Securityweek - (International) Google discloses unpatched Windows 8.1 
vulnerability. A security hole that was reported to Microsoft in September 2014 by 
Google’s Project Zero initiative was disclosed through a proof-of-concept (PoC) for a 
local privilege escalation vulnerability affecting Windows 8.1 which does not check the 
impersonation token of the caller to determine if a user is an administrator after 
allowing application compatibility data to be cached for quick reuse when new 
processes are created. Microsoft reported that it is working on an update to address the 
vulnerability. 

Source: http://www.securitvweek.com/google-discloses-unpatched-windows-81- 
vulnerability 



26. January 5, Help Net Security - (International) The hidden dangers of third party 
code in free apps. MWR InfoSecurity researchers found several ways hackers can 
abuse ad networks by exploiting vulnerabilities in free mobile apps due to a privileged 
code injected into the apps that advertisers and third parties use for tracking which 
could allow access to address books, SMS contents, email, or any other action on the 
device that the app developer is allowed to access. 

Source: http://www.net-security.org/secworld.php?id=17783 

27. January 5, Softpedia - (International) New Steam stealer malware sample gets 
analyzed, points to Australian national. A researcher discovered 14 active malware 
samples in 2014 which were used to steal game items from the accounts of Steam users 
and spread to the list of friends available via chat messages, prompting security 
researchers to urge users to refrain from running executable files delivered through 
comments or communication in chat. 

Source: http://news.softpedia.com/news/New-Steam-Stealer-Malware-Sample-Gets- 
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Analyzed-Points-to-Australian-National-468902.shtml 



28. January 5, Softpedia - (International) PayPal complete account hijacking bug gets 
fix, no award given. PayPal fixed a bug that was discovered by a researcher which 
potentially allowed an attacker to steal sensitive information from an account after a 
discovery that PayPal did not verify the actual contents of a file uploaded through a 
page, trusting the extension of the item implicitly, despite the fact that the data is served 
back with false (media type of the message content) MIME type. The bug would have 
allowed an attacker to upload any file to any PayPal subdomain in order to compromise 
an account. 

Source: http://news.softpedia.com/news/PavPal-Complete-Account-Hiiacking-Bug- 
Gets-Fix-No-Award-Given-468856.shtml 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



T Return to top i 



Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

29. January 5, WTOP 103.5 FM Washington, D.C. - (Virginia) 2 Alexandria fires ruled 
arson. A January 4 fire at the Morningside Apartments complex in Alexandria, 
Virginia, caused an estimated $500,000 in damage and displaced 15 residents, while 
three residents were transported to area hospitals for non-life threatening injuries. 
Investigators ruled that the fire was intentionally set and continue to examine evidence 
Source: http://wtop.com/alexandria/2015/01/alexandria-apartment-fire-set-intionallv/ 

30. January 4, Torrance Daily Breeze - (California) Torrance strip mall fire injures 2 
firefighters. Authorities are investigating the source of a 3-alarm fire at Joseph’s 
Cleaners located at a strip mall in Torrance January 2 that caused an estimated 
$750,000 in damage. Two firefighters were transported to area hospitals for injuries 
sustained while battling the blaze. 

Source: http://www.dailybreeze.com/general-news/20150103/torrance-strip-mall-fire- 
injures-2-firefighters 

31. January 3, KCBS 2 Los Angeles - (California) 25 residents displaced In Victorville 
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apartment fire. A January 3 fire that broke out on the balcony of a unit at the Rodeo 
Drive Meadow Apartments complex in Victorville spread into the structure’s attic and 
caused an estimated $200,000 in damage. About 25 residents were displaced and two 
firefighters were injured when the roof and ceiling of the structure collapsed. 

Source: http://losangeles.cbslocal.com/2015/01/03/25-residents-displaced-in- 
victorville-apartment-fire/ 

32. January 2, Associated Press - (California) Shooting at New Year’s Eve party in 
Grand Terrace leaves 1 dead, 2 wounded. One security guard was killed and two 
individuals were injured January 1 when a gunman opened fire at the Cal Skate roller 
rink in Grand Terrace during an all-night New Year's Eve event. Police continue to 
search for a suspect and the roller rink was closed indefinitely following the incident. 
Source: http://www.sbsun.com/general-news/2015Q101/shooting-at-new-vears-eve- 
part y- in- grand-terrace-leaves-1 -dead-2- wounded 

33. January 2, Associated Press - (Texas) Lowe's employee, 23, dies when wood falls on 
him. The Occupational Safety and Health Administration is investigating after an 
employee at a Lowe’s Home Improvement store in Lubbock was killed January 2 when 
a rack of lumber fell onto the individual. The store closed for the remainder of the day 
following the incident. 

Source: http://www.star-telegram.com/news/state/texas/article5349030.html 
Lor another story, see item 13 
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Dams Sector 

Nothing to report 
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DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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